Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ba59af8d-cd38-3210-95f1-ed3012495264.roa
File:                     ba59af8d-cd38-3210-95f1-ed3012495264.roa (raw, json)
Hash identifier:          mLceRBmMknAg4DmOrjV4usLT1cax0GYzUSWK0Q8/S/Q=
Subject key identifier:   32:97:54:72:93:E6:A9:90:10:55:CE:BE:95:AD:83:C9:30:03:71:D9
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B0540E1B635B98214007C39C0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ba59af8d-cd38-3210-95f1-ed3012495264.roa
Signing time:             Fri 29 Aug 2025 19:37:28 +0000
ROA not before:           Fri 29 Aug 2025 19:37:28 +0000
ROA not after:            Thu 27 Nov 2025 20:37:28 +0000
asID:                     5650
IP address blocks:        64.81.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:05:40:e1:b6:35:b9:82:14:00:7c:39:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 29 19:37:28 2025 GMT
            Not After : Nov 27 20:37:28 2025 GMT
        Subject: CN=acea3d18-4903-42df-afdb-dd0a6bf482e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d9:3a:b4:b7:c0:ae:a0:f8:74:fc:bb:73:4d:
                    e6:58:d0:ae:1b:72:34:3d:ab:a3:e2:9e:c7:01:78:
                    03:af:cd:db:2d:f4:47:e2:29:9d:a4:98:c1:7c:48:
                    d0:82:5e:29:76:94:62:89:18:ab:68:b7:f6:de:df:
                    58:91:ee:12:81:ec:72:52:0e:37:1b:29:18:08:5d:
                    64:77:30:60:51:9a:f4:06:ea:0c:69:9c:db:5e:53:
                    2b:42:46:15:6e:cc:66:e2:99:61:a4:b4:54:9b:f0:
                    24:55:09:8e:f0:1a:c2:d9:4b:76:f0:49:1a:42:e1:
                    a6:9e:63:dc:d5:50:3c:a4:00:ec:a6:5f:4d:9f:47:
                    28:14:40:50:3a:47:a1:a5:28:68:9e:65:b4:4a:2d:
                    76:8f:83:4e:e5:3c:b2:36:49:d6:81:73:10:60:99:
                    e4:fc:44:47:ec:9a:7a:10:ee:d2:29:24:06:4c:e7:
                    8d:b0:9e:25:3c:06:1a:0d:da:8f:b5:c1:3e:1b:0e:
                    c7:15:6a:1a:99:73:61:aa:a9:39:7a:95:38:cd:da:
                    fc:d8:b1:77:d5:8c:b2:36:b2:b4:8d:f3:f5:9e:a0:
                    c4:1b:c1:08:6c:74:72:fe:79:b9:8d:cc:da:23:42:
                    56:e6:03:56:e0:27:c9:81:f4:69:50:7d:09:ca:f9:
                    91:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:97:54:72:93:E6:A9:90:10:55:CE:BE:95:AD:83:C9:30:03:71:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ba59af8d-cd38-3210-95f1-ed3012495264.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.81.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:5b:ec:14:cf:b5:73:78:96:84:bf:cc:7c:8e:79:4f:94:e5:
         91:76:80:7c:64:0e:81:c7:ad:2f:a8:f2:df:7f:58:6f:5f:a3:
         e5:3d:2e:12:8e:ca:3f:de:3f:5f:41:b8:a2:ee:bf:66:52:76:
         35:f7:b6:e4:b9:a7:e7:bd:9d:35:c8:05:ce:cc:5e:08:8f:cb:
         29:7b:74:5a:18:74:9b:aa:83:9d:af:84:ba:32:57:e7:00:ce:
         48:36:32:55:13:36:52:12:2b:2a:94:15:25:2a:e0:0e:ca:f1:
         c5:ac:47:52:b3:8a:d6:e2:c4:05:65:f5:82:ba:45:14:5e:c7:
         dc:81:d6:5d:91:18:bf:d4:a4:63:8a:13:4c:00:64:d8:b7:ca:
         e7:83:90:bd:a2:f3:fe:d0:e0:da:d5:8b:66:b5:b7:9d:7e:2c:
         98:c7:e3:50:67:61:eb:da:c3:2c:3b:78:c3:1f:d6:cb:f8:fd:
         89:8c:21:ba:c1:ba:1c:b2:7a:71:2e:02:05:be:59:71:9e:4e:
         e6:6b:05:19:64:ee:94:27:a5:63:4e:37:ad:d7:43:9a:ca:99:
         22:c9:e3:3a:93:65:f2:3e:fc:4d:c7:47:91:65:73:db:c0:71:
         da:bd:af:6c:2d:6d:3c:70:dd:93:d2:39:ac:ee:68:a4:ab:78:
         db:d1:fa:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 02:31:31 2025 by rpki-client